Verify Access to Webserver

[niccokunzmann]

Motivation

We need a way to verify that the web server we redirect to is under the control of the person entering the data.

Solution Suggestions

We can implement different tests based on strings:

• / or redirects should include the random string somewhere
• /.freifunk-website-proxy or redirects include the random string

This way, one can only include the router if the string matches.
The access should be tested hourly and be revoked if the tests fail.
The string should be reproducible.

Examples

If you want to provide access to domain "sub.doma.in", you should include the string "proxy+sub.doma.in+allow"
This can be in html comments or in plain text.